Description
gm-upload.cgi in Greymatter 1.3.1 allows remote authenticated users with upload privileges to execute arbitrary programs by uploading files to locations within the web root. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References
- 17271 vdb-entry
- 24210 vdb-entry
- greymatter-gmupload-file-upload(25496) vdb-entry
- ADV-2006-1138 vdb-entry
- 19423 third-party-advisory